Open Bug 1420752 Opened 7 years ago Updated 2 years ago

Add a pref to display a negative indicator in the URL bar for mixed content sites

Categories

(Firefox :: Site Identity, enhancement, P3)

enhancement

Tracking

()

People

(Reporter: jkt, Unassigned)

References

(Blocks 1 open bug)

Details

Add a pref for turning the mixed content icon into the insecure icon when a page loads mixed passive content. See the work in Bug 1310447 which had a patch for doing this.
Wouldn't just upgrading everything that is possible and blocking the rest result in a much better UX? Sure, the site could lose an image or two, but at least the user is secure instead of seeing a warning they don't know how to fix.
Priority: -- → P3

Verify Whether HTTP Resources Are Accessible Over HTTPS
The next step is confirming that the resources loading over HTTP are accessible over HTTPS. They most likely are, you just need to update the links.

As an example, let’s say our mixed content errors pointed to the following insecure jQuery script and .jpg image:

http://ajax.googleapis.com/ajax/libs/jquery/3.31/jquery.min.js
http://example-site.com/wp-content/50d00acf6e4%2Fpuppy-thumb.jpg?v=1600261043278
If we take both of those URLs, input them into our browser’s address bar, and replace “HTTP” with “HTTPS” at the beginning, we can see that they load just fine. Therefore, we simply need to do a search and replace our site like https://www.10plays.com/

Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.